archetech / archon

95%

main: 89%

LAST BUILD ON BRANCH remediate-audit-runtime-1

branch: remediate-audit-runtime-1

CHANGE BRANCH

x

Reset

Sync Branches

• remediate-audit-runtime-1
• 101-challenge-in-url
• 102-create-id
• 111-change-passphrase
• 114-add-change-passphrase
• 116-importbatch-fix
• 123-did-version-explorer
• 129-challenge-schemas
• 129-improved-auth
• 13-upgrade-kubo-ipfs
• 136-lightning-wallets
• 137-explorer-export-unrestricted
• 14-merge-search-server
• 141-l402-disable
• 143-version-endpoints
• 145-decode-lightning-invoice
• 147-lightning-web-client
• 149-local-lightning-stack
• 151-grafana-dashboard-styling
• 153-change-registry
• 154-lightning-zap
• 159-lightning-zap-web-ui
• 164-lightning-payment-history
• 17-report-version
• 180-android-apk-fix
• 181-liquid-btc
• 181-liquid-registry
• 184-did-properties
• 190-wallet-metrics
• 198-filter-alias
• 2-remove-deprecated
• 201-standalone-clients
• 203-vite-build-args
• 205-get-version-method
• 206-drawbridge-public-only
• 207-settings-tab
• 208-streaming-file-uploads
• 21-rename-groupvault
• 210-firefox-extension
• 212-refresh-properties-after-add
• 213-remove-version-footer
• 216-upgrade-kubo
• 22-rename-version
• 220-firefox-protocol-handler
• 221-persist-passphrase-session-storage
• 223-filter-unpaid-invoices
• 227-alias-accept-link
• 229-android-wallet-download
• 231-android-signing-key
• 234-hybrid-fee-estimation
• 236-lightning-payment-filtering
• 24-refactor-keymaster
• 246-dmail-name-resolution
• 248-add-docker-healthchecks
• 26-support-mainnet
• 28-import-schema-pack
• 3-refactor-credentials
• 31-observability
• 36-avoid-duplicating-verifiablecredential
• 38-add-cli-to-keymaster-package
• 410-add-email-dmail-bridge
• 44-get-vault-item
• 47-transition-schemas
• 51-wallet-is-missing
• 55-add-dmail-commands
• 56-did-aliases
• 57-cl-hive
• 58-missing-update-credential-command
• 6-fix-lint-errors
• 60-refactor-cli-tests
• 64-improve-security
• 68-add-get-property
• 69-rename-updateasset
• 70-make-upload-limit-configurable
• 74-rename-document-assets
• 77-image-assets-should-be-file-assets
• 8-rename-cas
• 81-universal-resolver
• 84-cli-vote-poll
• 85-add-JOSE
• 86-credentialsubjects
• 88-refactor-polls
• 91-incorrect-passphrase
• 93-view-credential
• 95-edit-credential
• add-address-herald-relay-agent
• add-eth-sol-grafana-dashboards
• add-zec-mainnet-dashboard
• allow-pin-batch-registry
• bounty-ledger
• bump-app-service-versions-0.9.0
• bump-versions-0.8.0
• chore/consolidate-dependabot-groups
• chore/init-v0.5
• chore/keymaster-py-version-bump
• chore/move-satoshi-wallet-service
• chore/replace-icons-156
• chore/standardize-admin-header
• chore/update-mediator-checkpoints
• chore/use-patched-lnbits-image
• cli-test-assets
• cln-rtl
• codex/add-did-resolution-benchmark
• codex/aliases-ui-rename
• codex/bump-versions-v0.10.0
• codex/configure-dependabot-monorepo
• codex/extract-lightning-mediator
• codex/fix-herald-client-allowed-hosts
• codex/fix-herald-well-known-proxy
• codex/fix-hyperswarm-healthcheck
• codex/fix-satoshi-reimport-loop
• codex/harden-ci-supply-chain
• codex/herald-address-cli-docs
• codex/import-herald-service
• codex/issue-247-node-url-labels
• codex/issue-253-keymaster-installer
• codex/match-extension-alias-confirmation
• codex/pin-npm-toolchain
• codex/react-wallet-build-env-override
• codex/remove-herald-write-well-known
• codex/remove-lnbits-restart
• codex/rename-satoshi-wallet-service
• codex/test-cl-hive-node-3-1-0
• codex/throttle-dependabot-prs
• codex/update-cln-image
• codex/use-wallet-url-for-herald-alias-qr
• codex/wallet-handoff-deep-links
• compose-profiles
• dependabot/cargo/rust/services/gatekeeper/cargo-8056535635
• dependabot/cargo/rust/services/gatekeeper/cargo-bad20da00d
• dependabot/github_actions/actions/setup-node-6.4.0
• dependabot/github_actions/actions/setup-python-6.2.0
• dependabot/github_actions/anchore/scan-action-7.4.0
• dependabot/github_actions/android-actions/setup-android-4.0.1
• dependabot/github_actions/docker/build-push-action-7.0.0
• dependabot/github_actions/docker/login-action-4.2.0
• dependabot/github_actions/docker/metadata-action-6.0.0
• dependabot/github_actions/docker/setup-buildx-action-4.0.0
• dependabot/github_actions/docker/setup-qemu-action-4.0.0
• dependabot/github_actions/github-actions-minor-and-patch-984b8abbd7
• dependabot/github_actions/github-actions-minor-and-patch-c906a188b2
• dependabot/github_actions/github-actions-minor-and-patch-d2d9db5a03
• dependabot/github_actions/github-actions-minor-and-patch-f536dadcea
• dependabot/github_actions/softprops/action-gh-release-3.0.0
• dependabot/npm_and_yarn/apps/browser-extension/fast-uri-3.1.2
• dependabot/npm_and_yarn/apps/browser-extension/lodash-4.18.1
• dependabot/npm_and_yarn/apps/browser-extension/npm_and_yarn-2126ddaa05
• dependabot/npm_and_yarn/apps/browser-extension/npm_and_yarn-b1d91c4252
• dependabot/npm_and_yarn/apps/browser-extension/npm_and_yarn-b4b6aa0ffb
• dependabot/npm_and_yarn/apps/browser-extension/npm_and_yarn-d567ba7369
• dependabot/npm_and_yarn/apps/browser-extension/postcss-8.5.13
• dependabot/npm_and_yarn/apps/gatekeeper-client/axios-1.15.0
• dependabot/npm_and_yarn/apps/gatekeeper-client/axios-1.15.2
• dependabot/npm_and_yarn/apps/gatekeeper-client/follow-redirects-1.16.0
• dependabot/npm_and_yarn/apps/gatekeeper-client/postcss-8.5.13
• dependabot/npm_and_yarn/apps/gatekeeper-client/vite-8.0.11
• dependabot/npm_and_yarn/apps/gatekeeper-client/vite-8.0.16
• dependabot/npm_and_yarn/apps/gatekeeper-client/vite-8.0.5
• dependabot/npm_and_yarn/apps/gatekeeper-client/vite-8.0.8
• dependabot/npm_and_yarn/apps/herald-client/axios-1.15.0
• dependabot/npm_and_yarn/apps/herald-client/axios-1.15.2
• dependabot/npm_and_yarn/apps/herald-client/axios-1.16.0
• dependabot/npm_and_yarn/apps/herald-client/esbuild-0.25.12
• dependabot/npm_and_yarn/apps/herald-client/follow-redirects-1.16.0
• dependabot/npm_and_yarn/apps/herald-client/npm_and_yarn-6c2b7fe5d9
• dependabot/npm_and_yarn/apps/herald-client/npm_and_yarn-d93b56d3ab
• dependabot/npm_and_yarn/apps/herald-client/picomatch-4.0.4
• dependabot/npm_and_yarn/apps/herald-client/postcss-8.5.13
• dependabot/npm_and_yarn/apps/herald-client/rollup-4.60.3
• dependabot/npm_and_yarn/apps/herald-client/vite-6.4.2
• dependabot/npm_and_yarn/apps/herald-client/vite-8.0.10
• dependabot/npm_and_yarn/apps/herald-client/vite-8.0.11
• dependabot/npm_and_yarn/apps/herald-client/vite-8.0.13
• dependabot/npm_and_yarn/apps/herald-client/vite-8.0.14
• dependabot/npm_and_yarn/apps/herald-client/vite-8.0.16
• dependabot/npm_and_yarn/apps/herald-client/vite-8.0.8
• dependabot/npm_and_yarn/apps/herald-client/vite-8.0.9
• dependabot/npm_and_yarn/apps/keymaster-client/axios-1.15.0
• dependabot/npm_and_yarn/apps/keymaster-client/axios-1.15.2
• dependabot/npm_and_yarn/apps/keymaster-client/follow-redirects-1.16.0
• dependabot/npm_and_yarn/apps/keymaster-client/postcss-8.5.13
• dependabot/npm_and_yarn/apps/keymaster-client/vite-8.0.16
• dependabot/npm_and_yarn/apps/keymaster-client/vite-8.0.5
• dependabot/npm_and_yarn/apps/keymaster-client/vite-8.0.8
• dependabot/npm_and_yarn/apps/react-wallet/esbuild-0.28.0
• dependabot/npm_and_yarn/apps/react-wallet/lodash-4.18.1
• dependabot/npm_and_yarn/apps/react-wallet/npm_and_yarn-04351d2771
• dependabot/npm_and_yarn/apps/react-wallet/npm_and_yarn-844dcdb493
• dependabot/npm_and_yarn/apps/react-wallet/npm_and_yarn-bf05dc1ecf
• dependabot/npm_and_yarn/apps/react-wallet/npm_and_yarn-c4fb857816
• dependabot/npm_and_yarn/apps/react-wallet/tmp-0.2.7
• dependabot/npm_and_yarn/apps/react-wallet/vite-8.0.10
• dependabot/npm_and_yarn/apps/react-wallet/vite-8.0.11
• dependabot/npm_and_yarn/apps/react-wallet/vite-8.0.13
• dependabot/npm_and_yarn/apps/react-wallet/vite-8.0.14
• dependabot/npm_and_yarn/apps/react-wallet/vite-8.0.16
• dependabot/npm_and_yarn/apps/react-wallet/vite-8.0.5
• dependabot/npm_and_yarn/apps/react-wallet/vite-8.0.8
• dependabot/npm_and_yarn/apps/react-wallet/vite-8.0.9
• dependabot/npm_and_yarn/axios-1.15.0
• dependabot/npm_and_yarn/axios-1.16.0
• dependabot/npm_and_yarn/axios-1.16.1
• dependabot/npm_and_yarn/axios-1.17.0
• dependabot/npm_and_yarn/babel/plugin-transform-modules-systemjs-7.29.4
• dependabot/npm_and_yarn/brace-expansion-1.1.13
• dependabot/npm_and_yarn/fast-uri-3.1.2
• dependabot/npm_and_yarn/file-type-21.3.2
• dependabot/npm_and_yarn/file-type-22.0.0
• dependabot/npm_and_yarn/flatted-3.4.2
• dependabot/npm_and_yarn/follow-redirects-1.16.0
• dependabot/npm_and_yarn/ip-address-10.2.0
• dependabot/npm_and_yarn/lodash-4.18.1
• dependabot/npm_and_yarn/minimatch-10.2.5
• dependabot/npm_and_yarn/node-forge-1.4.0
• dependabot/npm_and_yarn/npm_and_yarn-6e15a28541
• dependabot/npm_and_yarn/npm_and_yarn-8c7b98fe3a
• dependabot/npm_and_yarn/npm_and_yarn-960c982be2
• dependabot/npm_and_yarn/npm_and_yarn-c202cd394c
• dependabot/npm_and_yarn/rollup-4.60.2
• dependabot/npm_and_yarn/rollup-4.60.3
• dependabot/npm_and_yarn/services/drawbridge/server/npm_and_yarn-5fdcb96cbe
• dependabot/npm_and_yarn/services/drawbridge/server/path-to-regexp-0.1.13
• dependabot/npm_and_yarn/services/explorer/axios-1.13.5
• dependabot/npm_and_yarn/services/explorer/axios-1.15.0
• dependabot/npm_and_yarn/services/explorer/axios-1.15.2
• dependabot/npm_and_yarn/services/explorer/axios-1.16.0
• dependabot/npm_and_yarn/services/explorer/follow-redirects-1.16.0
• dependabot/npm_and_yarn/services/explorer/form-data-4.0.5
• dependabot/npm_and_yarn/services/explorer/multi-46822222ac
• dependabot/npm_and_yarn/services/explorer/multi-4ba2d64a52
• dependabot/npm_and_yarn/services/explorer/multi-6cb4a7dc76
• dependabot/npm_and_yarn/services/explorer/multi-bfc14d0f24
• dependabot/npm_and_yarn/services/explorer/multi-f57e1e291f
• dependabot/npm_and_yarn/services/explorer/npm_and_yarn-21a4bf3b45
• dependabot/npm_and_yarn/services/explorer/path-to-regexp-8.4.1
• dependabot/npm_and_yarn/services/explorer/path-to-regexp-8.4.2
• dependabot/npm_and_yarn/services/explorer/postcss-8.5.13
• dependabot/npm_and_yarn/services/explorer/qs-6.15.1
• dependabot/npm_and_yarn/services/explorer/qs-6.15.2
• dependabot/npm_and_yarn/services/explorer/remix-run/router-1.23.2
• dependabot/npm_and_yarn/services/explorer/rollup-3.30.0
• dependabot/npm_and_yarn/services/explorer/rollup-4.60.2
• dependabot/npm_and_yarn/services/explorer/rollup-4.60.3
• dependabot/npm_and_yarn/services/explorer/vite-5.4.21
• dependabot/npm_and_yarn/services/explorer/vite-8.0.10
• dependabot/npm_and_yarn/services/explorer/vite-8.0.11
• dependabot/npm_and_yarn/services/explorer/vite-8.0.13
• dependabot/npm_and_yarn/services/explorer/vite-8.0.14
• dependabot/npm_and_yarn/services/explorer/vite-8.0.8
• dependabot/npm_and_yarn/services/explorer/vite-8.0.9
• dependabot/npm_and_yarn/services/explorer/yaml-1.10.3
• dependabot/npm_and_yarn/services/gatekeeper/server/multi-a07fd7252a
• dependabot/npm_and_yarn/services/gatekeeper/server/multi-c6f6658ed3
• dependabot/npm_and_yarn/services/gatekeeper/server/multi-d31b51a7f2
• dependabot/npm_and_yarn/services/gatekeeper/server/multi-f792d6d6d9
• dependabot/npm_and_yarn/services/gatekeeper/server/npm_and_yarn-516916688b
• dependabot/npm_and_yarn/services/gatekeeper/server/path-to-regexp-0.1.13
• dependabot/npm_and_yarn/services/herald/server/axios-1.16.0
• dependabot/npm_and_yarn/services/herald/server/axios-1.16.1
• dependabot/npm_and_yarn/services/herald/server/axios-1.17.0
• dependabot/npm_and_yarn/services/herald/server/path-to-regexp-8.4.1
• dependabot/npm_and_yarn/services/herald/server/qs-6.15.0
• dependabot/npm_and_yarn/services/herald/server/qs-6.15.1
• dependabot/npm_and_yarn/services/herald/server/qs-6.15.2
• dependabot/npm_and_yarn/services/herald/server/undici-7.24.6
• dependabot/npm_and_yarn/services/herald/server/undici-7.24.7
• dependabot/npm_and_yarn/services/keymaster/server/multi-a07fd7252a
• dependabot/npm_and_yarn/services/keymaster/server/multi-c6f6658ed3
• dependabot/npm_and_yarn/services/keymaster/server/multi-d31b51a7f2
• dependabot/npm_and_yarn/services/keymaster/server/multi-f792d6d6d9
• dependabot/npm_and_yarn/services/keymaster/server/path-to-regexp-0.1.13
• dependabot/npm_and_yarn/services/mediators/hyperswarm/multi-a07fd7252a
• dependabot/npm_and_yarn/services/mediators/hyperswarm/multi-c6f6658ed3
• dependabot/npm_and_yarn/services/mediators/hyperswarm/multi-d31b51a7f2
• dependabot/npm_and_yarn/services/mediators/hyperswarm/multi-f792d6d6d9
• dependabot/npm_and_yarn/services/mediators/hyperswarm/path-to-regexp-0.1.13
• dependabot/npm_and_yarn/services/mediators/lightning/npm_and_yarn-32e07c5719
• dependabot/npm_and_yarn/services/mediators/lightning/npm_and_yarn-34cf670699
• dependabot/npm_and_yarn/services/mediators/lightning/npm_and_yarn-9ddfda7c4f
• dependabot/npm_and_yarn/services/mediators/lightning/npm_and_yarn-aec78ffa1d
• dependabot/npm_and_yarn/services/mediators/lightning/npm_and_yarn-bad15b2719
• dependabot/npm_and_yarn/services/mediators/lightning/npm_and_yarn-f1ef2aecd7
• dependabot/npm_and_yarn/services/mediators/satoshi-wallet/npm_and_yarn-4320d58c8a
• dependabot/npm_and_yarn/services/mediators/satoshi/ajv-6.14.0
• dependabot/npm_and_yarn/services/mediators/satoshi/axios-1.14.0
• dependabot/npm_and_yarn/services/mediators/satoshi/axios-1.15.0
• dependabot/npm_and_yarn/services/mediators/satoshi/axios-1.15.2
• dependabot/npm_and_yarn/services/mediators/satoshi/axios-1.16.0
• dependabot/npm_and_yarn/services/mediators/satoshi/axios-1.16.1
• dependabot/npm_and_yarn/services/mediators/satoshi/axios-1.17.0
• dependabot/npm_and_yarn/services/mediators/satoshi/brace-expansion-1.1.13
• dependabot/npm_and_yarn/services/mediators/satoshi/follow-redirects-1.16.0
• dependabot/npm_and_yarn/services/mediators/satoshi/lodash-4.17.23
• dependabot/npm_and_yarn/services/mediators/satoshi/lodash-4.18.1
• dependabot/npm_and_yarn/services/mediators/satoshi/minimatch-3.1.5
• dependabot/npm_and_yarn/services/mediators/satoshi/multi-c6f6658ed3
• dependabot/npm_and_yarn/services/mediators/satoshi/path-to-regexp-0.1.13
• dependabot/npm_and_yarn/services/mediators/satoshi/picomatch-2.3.2
• dependabot/npm_and_yarn/services/mediators/satoshi/tmp-0.2.7
• dependabot/npm_and_yarn/services/mediators/satoshi/yaml-2.8.3
• dependabot/npm_and_yarn/services/mediators/zcash/npm_and_yarn-1ca40131d0
• dependabot/npm_and_yarn/services/satoshi-wallet/server/axios-1.14.0
• dependabot/npm_and_yarn/services/satoshi-wallet/server/brace-expansion-1.1.13
• dependabot/npm_and_yarn/services/satoshi-wallet/server/path-to-regexp-0.1.13
• dependabot/npm_and_yarn/services/satoshi-wallet/server/picomatch-2.3.2
• dependabot/npm_and_yarn/services/satoshi-wallet/server/yaml-2.8.3
• dependabot/npm_and_yarn/shell-quote-1.8.4
• dependabot/npm_and_yarn/tmp-0.2.7
• dependabot/npm_and_yarn/undici-6.25.0
• dependabot/npm_and_yarn/ws-8.20.1
• dependabot/pip/python/keymaster/pip-88c005e9f0
• docs/clean-architecture-assessment
• docs/cli-lightning-commands
• docs/did-cid-presentation
• docs/flatten-protocol-dir
• docs/keymaster-readme-commands-table
• docs/lightning-zap-did-lud16-comparison
• docs/lightning-zap-sequence-diagram
• docs/missing-mediator-readmes
• docs/readme-expand-intro
• docs/rename-doc-to-docs
• docs/runtime-container-architecture
• docs/service-specs
• docs/sidetree-archon-comparison
• docs/update-readme-and-deployment
• docs/whitepaper-v1.1
• docs/zcash-deployment
• e2e-report
• eth-mainnet-registry-sample
• explorer-admin-api-key
• feat/archon-mcp-server
• feat/avatar-identity-tab
• feat/configurable-refresh-interval
• feat/deployment-docs
• feat/gatekeeper-client-addresses
• feat/identity-name-tab
• feat/import-nsec
• feat/keymaster-cli-addresses
• feat/keymaster-py-http-metrics
• feat/lightning-export-import
• feat/mcp-cli-completeness-roadmap
• feat/publish-address-actions
• feat/python-keymaster-service
• feat/python-sdk-lightning-sync
• feat/qr-scan-deep-link
• feat/rust-gatekeeper
• feat/wallet-service
• feature/auto-auth-response
• feature/eth-registry
• feature/solana-devnet-registry
• filecoin-storage-mediator
• fix-address-test-network-leak
• fix-buffer-deserialization
• fix-cli-list-registries
• fix-lnbits-clnrest-wait
• fix-missed-0.9-versions
• fix-pinning-registryless-names
• fix-rust-confirm-fallback
• fix-satoshi-sync-backfill
• fix-solana-slot-metrics
• fix-test-safety
• fix-tor-socks-localhost-default
• fix/did-metrics-normalization
• fix/grafana-live-version-labels
• fix/herald-admin-header-split
• fix/herald-avatar-endpoint
• fix/keymaster-py-parity-with-ts
• fix/keymaster-py-volume-permissions
• fix/l402-default
• fix/lightning-invoice-did-lookup
• fix/lint-warnings
• fix/pending-zap-payment-history
• fix/persist-tor-key
• fix/release-0.9-npm-publish
• fix/release-0.9-token-npm-publish
• fix/rust-gatekeeper-cargo-lock
• fix/rust-gatekeeper-dmail-perf
• fix/rust-gatekeeper-upperbound-timestamp
• fix/satoshi-pruned-fallback-bounded-scan
• fix/satoshi-raw-scan-segv
• fix/satoshi-sync-pruned-blocks
• herald-client-avatar-directory
• hosted-btc-testnet4-alchemy
• init-v0.3
• init-v0.4
• init-v0.6
• init-v0.7
• issue-160-lud16-zap
• issue-166-l402-default-false
• lightning-zap-check-status
• lnbits-clnrest-readiness
• main
• merge-python-keymaster-cli
• minimal-node-compose
• nostr-accordion
• nostr-accordion-apps
• npm-supply-chain-protections
• op-mining
• pin-cl-hive-2.13.2
• pinning-service-mediator
• pre-release
• prep-python-keymaster-pypi
• prerelease
• refactor-satoshi
• refactor-version
• release-0.1
• release-0.2
• release-0.3
• release-0.4
• release-0.5
• release-0.6
• release-0.7
• release-0.8
• release-0.9
• release-npm-20260130
• release-npm-20260202
• release-npm-20260209
• release-npm-20260211
• release-npm-20260212
• release-npm-20260213
• release-npm-20260216
• release-npm-20260219
• release-npm-20260221
• release-npm-20260304
• release-npm-20260305
• release-npm-20260320
• release-npm-20260323
• release-npm-20260406
• release-npm-20260606
• remove-deprecated-rebuild-scripts
• sol-start-block
• test-performance
• test/improve-keymaster-client-coverage
• test/improve-keymaster-coverage
• test/improve-l402-coverage
• zcash-wallet-service

Build # 24612603299

Build Type

Pull #451

github

Committed by macterra

Commit Message

Remediate runtime audit findings

Pull Request Pull Request #451: Remediate first runtime audit findings

Coverage Stats

1994 of 2200 branches covered (90.64%)

Branch coverage included in aggregate %.

4243 of 4359 relevant lines covered (97.34%)

1163.7 hits per line